Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
File:                     5dJyqNwEH1rcer0A1k0_MsIE2rI.mft (raw, json)
Hash identifier:          Qqv82VrSxso8vJwmzlMmYZKrBehKe0mlFDMu2MGJkzs=
Subject key identifier:   E0:3E:AD:F8:74:27:FA:EB:64:85:C1:43:40:9B:2B:64:FD:AD:73:BA
Authority key identifier: E5:D2:72:A8:DC:04:1F:5A:DC:7A:BD:00:D6:4D:3F:32:C2:04:DA:B2
Certificate issuer:       /CN=e5d272a8dc041f5adc7abd00d64d3f32c204dab2
Certificate serial:       01976BF3F3F5A69D3CBF82E7BDE3DA80A9F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
Manifest number:          0C48
Signing time:             Sat 14 Jun 2025 01:00:39 +0000
Manifest this update:     Sat 14 Jun 2025 01:00:39 +0000
Manifest next update:     Sun 15 Jun 2025 01:00:39 +0000
Files and hashes:         1: 5dJyqNwEH1rcer0A1k0_MsIE2rI.crl (hash: tsv3A3rEYRd1BH+e41lzCNI0JMF8s/gTT09dxwvHQwA=)
                          2: BSxB6YJq2jQPtYNgk4RjDz0LLwo.roa (hash: 0H0jQmEDdYcS0G88hDG7z0fv29sDbdsIXn2r0lKdjdI=)
                          3: DOxLN4SU2YKVe0VPHjqcaGZlpe0.roa (hash: SrolEIibncQUXL/HWDj/0Ei9nEoCbSOrTFYN2mtGMDo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:f3:f3:f5:a6:9d:3c:bf:82:e7:bd:e3:da:80:a9:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d272a8dc041f5adc7abd00d64d3f32c204dab2
        Validity
            Not Before: Jun 14 01:00:39 2025 GMT
            Not After : Jun 15 01:00:39 2025 GMT
        Subject: CN=e03eadf87427faeb6485c143409b2b64fdad73ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:99:c6:eb:50:f7:d9:d3:94:b1:7b:7c:92:dc:
                    44:88:d4:53:56:07:d9:26:1f:d0:19:4d:9c:6d:af:
                    58:07:65:90:08:60:a4:5c:da:20:e4:5d:ed:4c:0a:
                    dc:f9:f7:c1:15:1d:4f:43:38:c6:e0:cb:bb:fe:b9:
                    f0:50:c6:79:b8:24:94:51:e6:df:35:98:e3:cf:20:
                    80:8d:bf:3e:68:16:3b:23:44:bf:01:eb:70:6d:df:
                    72:f3:7a:00:e2:41:9d:a0:48:99:e7:a6:6d:e1:e4:
                    fc:bd:75:9c:8c:81:fc:e0:74:fa:31:ec:7c:68:54:
                    c4:cc:55:1c:cb:7e:20:89:38:fa:c9:34:ff:5f:68:
                    79:47:ee:48:fa:ee:36:15:3c:56:c9:07:43:bb:6d:
                    09:40:e1:97:b3:65:f4:6f:ce:8a:61:94:3c:41:6f:
                    c8:3a:45:30:6a:cb:00:7c:7c:3a:e5:87:f9:12:11:
                    37:85:2b:88:ae:2d:a9:f1:b4:ce:0b:51:24:e8:24:
                    65:48:97:f2:01:87:a7:3b:87:2a:64:15:a7:c0:60:
                    d2:b2:f0:3d:91:a6:53:06:da:f3:38:6e:61:68:a1:
                    ba:c1:af:f7:af:02:72:4d:49:6f:b5:50:35:ab:fd:
                    e4:e0:ab:fa:d0:5c:c8:c7:09:81:3b:5f:eb:6e:b5:
                    b7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:3E:AD:F8:74:27:FA:EB:64:85:C1:43:40:9B:2B:64:FD:AD:73:BA
            X509v3 Authority Key Identifier:
                keyid:E5:D2:72:A8:DC:04:1F:5A:DC:7A:BD:00:D6:4D:3F:32:C2:04:DA:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:db:d9:aa:72:01:b6:7d:f4:82:61:b9:68:c9:92:9f:a8:63:
         3b:67:44:3e:36:02:a3:2b:6f:1f:f2:fc:5b:75:d0:aa:64:94:
         da:87:0b:f1:c6:7c:46:69:68:e5:0c:55:1f:59:f3:f3:6a:fc:
         94:f7:a8:61:7a:2a:9e:1f:e8:f2:dc:54:9f:79:31:6f:e5:a8:
         02:f1:ee:c1:a5:33:f0:8b:3e:76:0c:7c:46:eb:12:0e:8b:a0:
         3d:c3:91:10:ce:2c:d8:24:c6:70:9d:45:10:47:7d:74:37:17:
         55:f2:28:a2:f0:10:c1:5b:4b:8d:3a:a1:f4:43:8e:65:25:40:
         18:9d:5e:fc:d3:8d:c9:6d:33:ad:f9:0e:ce:f8:00:3c:fc:e4:
         93:17:3b:5a:02:53:a9:b5:62:03:3f:9a:45:1b:1d:ac:83:96:
         5d:04:bd:f3:d9:76:4f:a0:a4:b1:93:9a:2d:24:9f:52:54:6f:
         a1:aa:c2:34:97:d2:e6:13:d1:8f:61:20:9a:30:e2:b6:94:d1:
         4a:36:fd:d9:bc:18:8f:d8:73:ed:a8:8e:5a:49:be:b5:a8:60:
         ff:25:5e:94:05:8a:04:00:73:f0:b6:7f:62:47:02:bd:1b:b2:
         bb:1f:3b:c6:1b:68:de:45:20:10:6d:27:a9:56:f3:17:ba:50:
         69:6e:36:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:01:31 2025 by rpki-client